If the bad guy gets access to one account, they can sometimes hack into many more.

“Always assume that you are going to be breached. One account is going to be breached at any given time,” said Westin. “You can reduce that risk by having separate passwords for each one of those websites or services.”

Woolworth recalled receiving a realistic-looking notification from Uber just before his account was hacked. It asked him to reset his account information.

“It had the little Uber icon and it said, ‘Uber needs you to update your personal information. I was like, okay, no big deal,” said Woolworth.

After he realized his account was hacked, Woolworth emailed Uber.

One of the perks of Uber -- not having to deal with a real person – was problematic for Woolworth. He couldn’t reach a real human being; instead, he had to file a complaint through email.

“They really didn’t understand the human interaction or the human frustration,” said Woolworth.

Uber said it appropriately handled the situation.

“We responded to him and refunded the trip the same day. We also helped him reset his password and secure his account,” said Uber spokesperson Melanie Ensign in an email to KGW.